Lucene search
PRIOn knowledge basePRION:CVE-2023-6638HistoryJan 11, 2024 - 9:15 a.m.
Design/Logic Flaw
2024-01-1109:15:00
PRIOn knowledge base
www.prio-n.com
2
gtg product feed
shopping plugin
wordpress
vulnerability
unauthorized modification
capability check
update settings
unauthenticated attackers
plugin settings
nvd
The GTG Product Feed for Shopping plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ‘update_settings’ function in versions up to, and including, 1.2.4. This makes it possible for unauthenticated attackers to update plugin settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gg_woo_feed | le | 1.2.4 |
Related
cve
cve
CVE-2023-6638
2024-01-11 09:15:50
nvd
nvd
CVE-2023-6638
2024-01-11 09:15:50
wpvulndb
wpvulndb
GTG Product Feed for Shopping <= 1.2.4 - Unauthenticated Settings Update
2023-12-16 00:00:00
cvelist
cvelist
CVE-2023-6638
2024-01-11 08:33:00
wordfence
wordfence